<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Leon,</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">The Shibboleth SP also has its own set of expirations. I would suggest extending the timeout in particular to something much longer and more significant for your application.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">There is no meaningful coupling between IdP and SP sessions in a typical Shibboleth deployment, so know the full impact of the change, for good and bad.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions" class="OWAAutoLink" id="LPlnk295608" previewremoved="true">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions</a><br>
<br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Take care,</p>
<p style="margin-top:0;margin-bottom:0">Nate.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Collins, Leon <Leon.Collins@itec.suny.edu><br>
<b>Sent:</b> Monday, April 23, 2018 7:17:21 AM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> shib_check_user: error</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">All,<br>
<br>
Can anyone tell me (point me in the right direction) why I'm seeing the below messages in my native.log file? I can correlate those messages to an issue I'm seeing in my application protected by Shib whenever a user try edit/save some content. For example,
if the user is in the middle of editing and saving a wiki page and the below messages show up that means the user will lose all their changes to the wiki page when they try to save (although they it appears that they IDP session hasn't expired).<br>
<br>
Shibboleth version 2.6.1.<br>
<br>
Thanks,<br>
Leon<br>
<br>
-----------------------------------------------------------------------------------------------------------------------<br>
<br>
2018-04-23 09:44:34 WARN Shibboleth.ServiceProvider [20294] shib_check_user: error during session lookup: Your session has expired, and you must re-authenticate.<br>
2018-04-23 09:57:00 INFO Shibboleth.SessionCache : purging 1 old sessions<br>
2018-04-23 09:57:13 INFO Shibboleth.SessionCache : purging 1 old sessions<br>
2018-04-23 09:59:00 INFO Shibboleth.SessionCache : purging 1 old sessions<br>
2018-04-23 09:59:06 ERROR Shibboleth.Listener [19658] shib_check_user: socket call (unknown) resulted in error (32): no message<br>
2018-04-23 09:59:06 ERROR Shibboleth.Listener [19658] shib_check_user: remoted message returned an error: Your session has expired, and you must re-authenticate.<br>
2018-04-23 09:59:06 WARN Shibboleth.ServiceProvider [19658] shib_check_user: error during session lookup: Your session has expired, and you must re-authenticate.<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
</body>
</html>